pizzafy-1.0 – SQLi
# Title: pizzafy-1.0 - SQLi
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Keycloak 26.7.2 – Unauthenticated Account Takeover
# Exploit Title: Keycloak 26.7.2 - Unauthenticated Account Takeover
Open eClass 3.15 – RCE
# Exploit Title: Open eClass 3.15 - RCE
Automotive Shop Management System 1.0 – SQLi
# Titles: Automotive Shop Management System 1.0 - SQLi
TigerGraph_Community_Edition 4.2.4 – arbitrary file write
Title: TigerGraph_Community_Edition 4.2.4 - arbitrary file write
WordPress 7.0.2 – Path Travesal
# Exploit Title: WordPress 7.0.2 - Path Travesal
Food-Ordering 1.0 – LFI
# Title: Food-Ordering 1.0 - LFI
Krayin CRM 2.2.4 – IDOR
# Exploit Title: Krayin CRM 2.2.4 - IDOR
SuiteCRM 8.10.1 – Authenticated SSRF
# Exploit Title: SuiteCRM 8.10.1 - Authenticated SSRF
InvoicePlane 1.7.1 – RCE
# Exploit Title: InvoicePlane 1.7.1 - RCE
POMS oretnom23v1.0 – SQLi vulnerabilities
# Title: POMS oretnom23v1.0 - SQLi vulnerabilities
FreePBX 17.0.2 – Remote Code Execution (RCE)
# Exploit Title: FreePBX 17.0.2 - Remote Code Execution
Metabase 0.61.0 – Authenticated Remote Code Execution
# Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution
Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
# Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
PodcastGenerator 3.2.9 – Stored XSS
# Exploit Title: PodcastGenerator 3.2.9 - Stored XSS
Ghost_CMS 6.19.0 – Remote Code Execution
# Exploit Title: Ghost_CMS 6.19.0 - Remote Code Execution
Langflow 1.10.0 – RCE
# Exploit Title: Langflow 1.10.0 - RCE
Marimo 0.20.4 – RCE
Title: Marimo 0.20.4 - RCE
Wolf CMS 0.8.3.1 – RCE v
# Exploit Title: Wolf CMS 0.8.3.1 - RCE
Payload CMS 3.72.0 – Blind SQL Injection
# Exploit Title: Payload CMS 3.72.0 - Blind SQL Injection
Bludit CMS – Stored XSS
# Exploit Title: Bludit CMS - Stored XSS
Grav CMS 2.0.7 – RCE
#!/usr/bin/env python3
miniOrange 5.4.3 – Unauthenticated Auth Bypass
# Exploit Title: miniOrange 5.4.3 - Unauthenticated Auth Bypass
EasyAppointments 1.5.1 – Blind SQL Injection
# Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection
C-MOR 6.0104 – Directory Traversal
# Exploit Title: C-MOR 6.0104 - Directory Traversal
C-MOR 6.0104 – Cross-Site Scripting (XSS)
# Exploit Title: C-MOR 6.0104 - Cross-Site Scripting (XSS)
CubeCart 6.7.4 – SQL injection
# Exploit Title: CubeCart 6.7.4 - SQL injection
CubeCart 6.7.4 – SQL
# Exploit Title: CubeCart 6.7.4 - SQL
CubeCart 6.7.4 – Stored XSS
# Exploit Title: CubeCart 6.7.4 - Stored Cross-Site Scripting
CubeCart 6.7.4 – Cross-Site Scripting
# Exploit Title: CubeCart 6.7.4 - Cross-Site Scripting
Linksys E1200_2.0.04 – Unauthenticated OS Command Injection
# Exploit Title: Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Langflow 1.8.4 – Path Traversal to Remote Code Execution
# Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution
flyto-core 2.26.7 – Arbitrary File Write
# Exploit Title: flyto-core 2.26.7 - Arbitrary File Write
Nodemailer 9.0.0 – File Read/ SSRF
# Exploit Title: Nodemailer 9.0.0 - File Read/ SSRF
Linuxfabrik monitoring_plugins_6.0.0 – SSRF
# Exploit Title: Linuxfabrik monitoring_plugins_6.0.0 - SSRF
flyto_core 2.26.7 – Server-Side Request Forgery
# Exploit Title: flyto_core 2.26.7- Server-Side Request Forgery
Probo 0.222.2 – IDOR
# Exploit Title: Probo 0.222.2 - IDOR
webpack_devserver 5.2.5 – CSRF
# Exploit Title: webpack_devserver 5.2.5 - Csrf
Duplicati 2.2.0.3 – JWT Signing Key Leak
# Exploit Title: Duplicati 2.2.0.3 - JWT Signing Key Leak
Joomla JCE_2.9.15 – Remote Code Execution
# Exploit Title: Joomla JCE_2.9.15 - Remote Code Execution
WooCommerce 1.5.0 – Unauthenticated Arbitrary File Upload
# Exploit Title: WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
Apache Gravitino 1.2.1 – SSRF
# Exploit Title: Apache Gravitino 1.2.1 - SSRF
Blocksy Companion 2.1.46 – RCE
#!/usr/bin/env python3
Planyo_Online_Reservation_System 3.0 – Arbitrary File Read via SSRF
# Exploit Title: Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Ray 2.56.0 – Directory Traversal & Local File Inclusion
# Exploit Title: Ray 2.56.0 - Directory Traversal & Local File Inclusion
OrkesConductor 3.30.2 – Unauthenticated Remote Code Execution
#!/usr/bin/env python3
CorgetGpsDget 2_3.2 – OS Command Injection
# Exploit Title: CorgetGpsDget 2_3.2 - OS Command Injection
Joomla 2.9.99.4 – Unauthenticated Remote Code Execution
# Exploit Title: Joomla 2.9.99.4 -Unauthenticated Remote Code Execution
Krayin CRM v2.2.x – Authenticated Remote Code Execution
# Exploit Title: Krayin CRM v2.2.x - Authenticated Remote Code Execution
Atarim WordPress Plugin 4.2.2 – Sensitive Information Exposure
# Exploit Title: Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure